$ rpki-client -vvf rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F5B752E4AC6411EF85E4707CC4F9AE02.roa File: F5B752E4AC6411EF85E4707CC4F9AE02.roa (raw, json) Hash identifier: BIhYQXo+ynpaauxBVASHvuQCNYPCsIa0qxYybQkkt8g= Subject key identifier: 94:E2:08:FC:14:F9:03:C2:56:F4:D9:EF:2C:B5:7C:A8:0E:C3:C0:26 Certificate issuer: /CN=A9135FB6/serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC Certificate serial: 36 Authority key identifier: 49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F5B752E4AC6411EF85E4707CC4F9AE02.roa Signing time: Thu 27 Feb 2025 09:32:07 +0000 ROA not before: Thu 27 Feb 2025 09:32:07 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 14618 IP address blocks: 146.116.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135FB6, serialNumber=49397E33B31C0A8F68FCD2072BDA9ACCB65D02EC Validity Not Before: Feb 27 09:32:07 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c03117-dbe1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:79:6c:ec:03:b6:25:c3:10:aa:44:a9:99:7e: 8d:10:5f:3d:79:31:67:10:e3:1a:69:3f:17:59:92: a7:54:7f:df:da:89:3b:be:6f:26:0c:06:a4:64:3a: 5c:e6:2b:df:2f:97:b9:3e:3c:e4:8c:33:a5:02:10: 94:3e:eb:bc:e1:df:01:5c:b8:40:1a:e7:09:79:6c: 30:67:65:fb:90:a6:2a:43:3d:39:70:49:05:c2:81: 53:e3:42:7e:a4:98:59:9f:5d:54:e2:98:ed:46:ef: 0a:09:d1:3f:1f:2b:a4:59:5a:fe:e6:33:72:47:5f: a4:b1:63:70:cb:8b:47:71:85:5b:9f:e5:8f:99:00: eb:e2:ed:39:b2:d2:3d:27:13:e5:b5:35:94:6f:63: ee:9b:f6:a3:ce:79:4c:2c:8c:89:96:20:57:7e:96: 2c:57:ba:d6:8e:e2:69:7e:e4:83:3b:67:43:1f:13: 39:78:d2:14:68:66:c8:be:51:6f:da:79:9c:60:10: 83:80:51:84:1b:0b:da:b3:6b:fc:99:74:0b:27:a8: 4e:dd:f5:f6:f4:0d:5e:37:42:99:b6:74:7f:df:e3: 9c:cd:a7:71:83:2e:ad:f8:09:f6:3b:de:04:61:64: 6a:7a:b9:22:76:a6:28:b2:7b:b2:53:d0:22:d8:ce: 8d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E2:08:FC:14:F9:03:C2:56:F4:D9:EF:2C:B5:7C:A8:0E:C3:C0:26 X509v3 Authority Key Identifier: keyid:49:39:7E:33:B3:1C:0A:8F:68:FC:D2:07:2B:DA:9A:CC:B6:5D:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/STl-M7McCo9o_NIHK9qazLZdAuw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/STl-M7McCo9o_NIHK9qazLZdAuw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135FB6/8647E41EAC6411EFB684267BC4F9AE02/F5B752E4AC6411EF85E4707CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.116.248.0/24 Signature Algorithm: sha256WithRSAEncryption 77:93:ae:16:e8:64:fd:db:6e:08:b5:cf:b7:ad:a0:20:bd:18: 80:d8:00:31:6c:d6:fb:58:25:21:54:32:5d:31:ab:69:31:68: 45:24:b4:a3:07:e4:10:d0:0a:06:6d:e2:35:6c:9b:12:a7:cf: aa:5e:e7:1c:7d:c9:4a:f8:f9:a2:6b:9d:9e:96:f4:39:b4:ff: 87:49:e3:45:b3:f3:ba:52:98:a7:ff:a8:a3:aa:b9:49:c2:e7: cb:7c:14:66:ba:79:de:65:f2:b6:b0:7d:a2:b8:30:6c:d5:1f: c5:7f:5a:25:9e:cd:79:9d:c5:28:23:0f:63:89:66:05:32:52: bd:86:f0:9b:5b:b9:88:3a:ea:15:9e:f2:9d:64:d9:78:a0:ae: e0:20:45:40:90:84:47:6b:39:ee:8b:9d:9f:64:e8:bb:46:e5: 36:05:ed:78:10:45:1b:b9:78:2e:5d:b3:6c:97:94:e5:62:fd: 5b:2d:8e:44:ea:ed:33:e2:eb:7c:79:45:5e:bf:b0:5d:ce:4a: 6e:a4:31:fe:ea:33:57:da:e6:31:59:8f:85:4f:ca:71:58:09: dc:69:52:0a:27:c5:2a:fb:68:55:fd:9d:f2:45:6c:6b:78:35: 5b:ee:38:81:cc:bd:1d:db:59:b2:c4:80:13:cf:b5:d9:6d:e8: ad:90:a5:fe -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NUZCNjExMC8GA1UEBRMoNDkzOTdFMzNCMzFDMEE4RjY4RkNEMjA3MkJEQTlBQ0NC NjVEMDJFQzAeFw0yNTAyMjcwOTMyMDdaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YzAzMTE3LWRiZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCveWzsA7YlwxCqRKmZfo0QXz15MWcQ4xppPxdZkqdUf9/aiTu+byYMBqRkOlzm K98vl7k+POSMM6UCEJQ+67zh3wFcuEAa5wl5bDBnZfuQpipDPTlwSQXCgVPjQn6k mFmfXVTimO1G7woJ0T8fK6RZWv7mM3JHX6SxY3DLi0dxhVuf5Y+ZAOvi7Tmy0j0n E+W1NZRvY+6b9qPOeUwsjImWIFd+lixXutaO4ml+5IM7Z0MfEzl40hRoZsi+UW/a eZxgEIOAUYQbC9qza/yZdAsnqE7d9fb0DV43Qpm2dH/f45zNp3GDLq34CfY73gRh ZGp6uSJ2piiye7JT0CLYzo11AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUlOII/BT5 A8JW9NnvLLV8qA7DwCYwHwYDVR0jBBgwFoAUSTl+M7McCo9o/NIHK9qazLZdAuww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM1RkI2Lzg2NDdFNDFFQUM2 NDExRUZCNjg0MjY3QkM0RjlBRTAyL1NUbC1NN01jQ285b19OSUhLOXFhekxaZEF1 dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvU1RsLU03TWNDbzlvX05JSEs5cWF6TFpkQXV3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NUZCNi84NjQ3RTQxRUFDNjQxMUVGQjY4NDI2N0JDNEY5QUUwMi9GNUI3NTJFNEFD NjQxMUVGODVFNDcwN0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAJJ0+DANBgkqhkiG9w0BAQsFAAOCAQEAd5OuFuhk/dtuCLXP t62gIL0YgNgAMWzW+1glIVQyXTGraTFoRSS0owfkENAKBm3iNWybEqfPql7nHH3J Svj5omudnpb0ObT/h0njRbPzulKYp/+oo6q5ScLny3wUZrp53mXytrB9orgwbNUf xX9aJZ7NeZ3FKCMPY4lmBTJSvYbwm1u5iDrqFZ7ynWTZeKCu4CBFQJCER2s57oud n2Tou0blNgXteBBFG7l4Ll2zbJeU5WL9Wy2OROrtM+LrfHlFXr+wXc5KbqQx/uoz V9rmMVmPhU/KcVgJ3GlSCifFKvtoVf2d8kVsa3g1W+44gcy9HdtZssSAE8+12W3o rZCl/g== -----END CERTIFICATE-----Generated at Wed Apr 23 09:02:22 2025 by rpki-client on console.sobornost.net